CVE-2026-75941CWE-502insecure-deserialization

CVE-2026-75941

High · published October 16, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
8.6 · CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00264 · 17.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-10-16T04:17Z
References (1)
https://iknow.lenovo.com.cn/detail/442627 · [email protected]
EPSS history
Timeline
  • 17 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 15 OCT 23:17Z
    A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on…
    cvelistv5
  • 15 OCT 23:17Z
    A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on…
    cvelistv5